A WA parliamentary question seeks information on cybersecurity spending and incidents within the Emergency Services and Corrective Services portfolios. The response indicates limited separate tracking of cybersecurity expenditure and no reported incidents within the specified timeframe for some agencies.

AnsweredQoN 559Legislative Assembly
Asked
25 May 2017
Portfolio
Emergency Services; Corrective Services

QuestionView source ↗

In respect of the Minister’s portfolio responsibilities for departments, agencies or publicly owned corporations: (a) how much money was spent on anti-virus, network security, firewall or anti-malware software in the last financial year; (b) from 17 March 2017 to 19 May 2017, have there been any reported instances of: (i) Viruses: (A) if so, what systems were affected, for how long and was there any downtime (in hours) for each system; (ii) Malware: (A) if so, what systems were affected, for how long and was there any downtime (in hours) for each system; (iii) Cyber-attack: (A) if so, what systems were affected, for how long and was there any downtime (in hours) for each system; and (B) was this attack reported to the WA or Australian Federal Police? If not, why not; (iv) DNS attack: (A) if so, what systems or websites were affected, for how long and was there any downtime (in hours) for each system; and (B) was this attack reported to the WA or Australian Federal Police? If not, why not; (v) Infected websites: (A) if so, what websites were infected / hacked, for how long and was there any downtime (in hours) for each system; (c) From 17 March 2017 to 19 May 2017 have any network files been illegally accessed by external individuals or organisations: (i) if so, what files were illegally accessed and when; (ii) if so, were the WA Police or Australian Federal Police informed of this illegal access; and (iii) if not, why not?

AnswerView source ↗

Answered
27 June 2017
Responded by
Minister for Emergency Services; Corrective Services
Response time
7 days
The Department of Corrective Services advises:
The Department of Fire and Emergency Services (DFES) advises:
(a) DFES does not separately record expenditure related to cyber security prevention, as it incorporates that together with a large number of ICT capabilities into the provision of business-related ICT services.
(b)(i) to (v) No. Not applicable.
(c)(i) to (iii) No. Not applicable.
The Office of Emergency Management (OEM) submits the following response:
(a) (b) (i) (ii) (iii) (iv) (v) (c) (i) (ii) (iii) The OEM as a sub-department of the Department of Fire and Emergency Services (DFES) relies on DFES support for all Information Technology and has complied with DFES risk management measures.
The Supervised Release Review Board only uses infrastructure supplied by Department of the Attorney General and Complies with all network security requirements.

Explore WA Government Data

Search the full archive in the free dashboard, or query programmatically via API.

Explore more